# Use Windows Autopilot device preparation for the scenarios it actually supports > Windows Autopilot device preparation simplifies selected Windows 11 provisioning, but it is not a drop-in replacement for every classic Autopilot scenario. Match join type, device mode, application count, scripts, reporting, and reset needs before rollout. - Canonical URL: https://update.dsesecurity.com/updates/windows-autopilot-device-preparation-scenario-fit/ - Publisher: Detection Systems & Engineering (DSE Security) - Author: DSE Security Editorial Team - Published: 2026-08-11T09:17:00+00:00 - Modified: 2026-08-11T14:12:11+00:00 - Last reviewed by DSE: 2026-08-11 - Resource type: Guide - DSE priority: Advisory - Topics: IT, Microsoft 365 & Identity - Reading time: 3 minutes ## What you need to know Windows Autopilot device preparation simplifies selected Windows 11 provisioning, but it is not a drop-in replacement for every classic Autopilot scenario. Match join type, device mode, application count, scripts, reporting, and reset needs before rollout. ## Potentially affected Windows 11 devices; Microsoft Intune; Microsoft Entra ID; Windows Autopilot and Windows Autopilot device preparation policies; provisioning groups; essential applications and PowerShell scripts; support and device-staging workflows. ## DSE recommendation Classify provisioning scenarios, compare each one with Microsoft’s current feature matrix, build a minimal essential payload, pilot on representative hardware and user paths, and retain classic Autopilot where device preparation does not meet the requirement. ## Article ## Source facts: device preparation and classic Autopilot are parallel choices Microsoft’s current [comparison of Windows Autopilot device preparation and Windows Autopilot](https://learn.microsoft.com/en-us/autopilot/device-preparation/compare) describes device preparation as a re-architected provisioning option for supported Windows 11 scenarios. Microsoft does not present it as an automatic migration that replaces every classic Autopilot profile. Windows Autopilot device preparation supports Microsoft Entra join, while classic Autopilot also supports Microsoft Entra hybrid join. Device preparation does not require pre-registering the device in Autopilot. Its policy is assigned to users and names a device group, with the Intune Provisioning Client configured as an owner; the device is added to that assigned group during provisioning. Microsoft identifies faster assignment processing and near-real-time reporting as benefits of this enrollment-time grouping approach. The current comparison lists up to 25 essential applications and up to 10 essential PowerShell scripts during device-preparation provisioning. Only device-targeted configuration is delivered during the out-of-box phase; user-targeted settings continue afterward. Supported application types and current limits should be checked in Microsoft’s requirements and FAQ before design because the service can evolve. Important scenario differences remain. Classic Autopilot supports pre-provisioned, self-deploying, and existing-device paths, Windows Autopilot Reset, Microsoft Entra hybrid join, Teams Meeting Room and HoloLens scenarios, DFCI, and broader out-of-box customization. Device preparation and classic Autopilot can coexist in a tenant, but a device runs one path. Microsoft states that a classic Autopilot profile takes precedence when a device is registered and assigned one. ## DSE recommendation: decide by provisioning persona Write a short persona for every deployment path before building policy. Examples include a new employee laptop shipped directly from a distributor, a replacement prepared by the help desk, a shared kiosk, a room system, a hybrid-joined workstation, and an existing device being repurposed. For each persona, record: - Windows version and edition, ownership, and hardware source; - Microsoft Entra join or hybrid-join requirement; - user-driven, pre-provisioned, self-deploying, automatic, reset, or existing-device workflow; - applications and scripts that truly must finish before the desktop is released; - user-targeted configuration that may arrive after sign-in; - network, proxy, licensing, enrollment-limit, local support, and recovery dependencies. Select device preparation only where its current matrix fits all mandatory requirements. Do not force a hybrid join, Teams Room, technician pre-provisioning, or Autopilot Reset need into the new path because its name sounds more current. Classic Autopilot can remain the governed choice for those personas while device preparation serves eligible user-driven Windows 11 devices. - Minimize the blocking payload. Put only applications and scripts needed for first productive use into the essential list. Let nonessential software install after the desktop becomes available. - Make dependencies deterministic. Confirm application supersedence, detection, restart behavior, architecture, network sources, installation context, and ordering. Avoid scripts that assume a user-targeted setting already exists. - Pilot clean and previously known devices. Test representative models, languages, networks, direct shipment, help-desk staging, failed provisioning, retry, wipe, and reassignment. Verify which path wins when a device still has classic Autopilot registration. - Define acceptance. Require successful enrollment, expected Entra and Intune records, assigned group membership, essential applications and scripts, supported Windows build, management check-in, normal sign-in, application launch, and help-desk visibility. - Exercise exception handling. Document what the user sees, what support can diagnose, when to retry, when to wipe, and how to remove an obsolete registration without producing duplicate or stale records. Measure setup duration, first-pass success, failure stage, application and script failures, time to productive desktop, duplicate records, support contacts, and devices routed to the wrong provisioning method. A successful rollout makes the simpler path genuinely simple while preserving other Autopilot modes where their capabilities are still required. ## Official references - Microsoft Learn, [Compare Windows Autopilot device preparation and Windows Autopilot](https://learn.microsoft.com/en-us/autopilot/device-preparation/compare), April 2, 2025. - Microsoft Learn, [Windows Autopilot device preparation requirements](https://learn.microsoft.com/en-us/autopilot/device-preparation/requirements). ## Primary reference - Name: Microsoft Learn: Compare Windows Autopilot device preparation and Windows Autopilot - Authority: Microsoft Learn - URL: https://learn.microsoft.com/en-us/autopilot/device-preparation/compare - Source publication date: 2025-04-02 ## Citation and use Preferred citation: “Use Windows Autopilot device preparation for the scenarios it actually supports,” DSE Security, https://update.dsesecurity.com/updates/windows-autopilot-device-preparation-scenario-fit/ Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/ Usage and citation policy: https://update.dsesecurity.com/usage/ Copyright © 2026 Detection Systems & Engineering. All rights reserved.